CVE-2026-94502: CWE-121 Stack-based Buffer Overflow in Silicon Labs EmberZNet

In EmberZNet versions up to and including 9.1.1, a stack-based buffer overflow (CWE-121) exists triggered by a malformed Publish Price Matrix command. This command, if crafted maliciously and sent from a device that has joined the network, can cause an out-of-bounds write in memory. This vulnerability specifically impacts devices supporting the Price Cluster functionality within EmberZNet. The flaw could allow an attacker with limited privileges (low privileges, partial attack complexity) to execute remote code, as indicated by the CVSS vector. No known exploits are reported in the wild, and this is not a cloud service vulnerability.

Successful exploitation can lead to remote code execution on affected devices, potentially allowing an attacker to execute arbitrary code with limited privileges. The vulnerability requires the attacker to be on the network and to send a specially crafted Publish Price Matrix command from a device that has already joined the network. This limits the attack surface but still poses a significant risk to devices supporting the Price Cluster.

No explicit patch or remediation details are provided in the input data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, restrict network access to trusted devices only and monitor for anomalous Publish Price Matrix commands from devices on the network. Because this vulnerability requires the attacker to be on the network and have a device joined, network segmentation and device authentication can help mitigate risk.